Virtual Labs

Why is a honeypot considered a detection mechanism rather than a preventive mechanism?

a: Because it detects and logs attacker interactions instead of stopping them directly Explanation

Explanation

b: Because it blocks all malicious traffic automatically Explanation

Explanation

c: Because it encrypts all database queries Explanation

Explanation

d: Because it replaces firewall systems Explanation

Explanation

Which of the following best indicates a potential attacker interacting with the honeypot database?

a: Regular access to authorized production tables Explanation

Explanation

b: Authorized administrator login Explanation

Explanation

c: Any queries executed on decoy sensitive tables Explanation

Explanation

d: Scheduled maintenance scripts Explanation

Explanation

What is the main advantage of analyzing logs generated by the honeypot system?

a: To permanently delete attacker data Explanation

Explanation

b: To increase database storage Explanation

Explanation

c: To automatically upgrade the database version Explanation

Explanation

d: To understand attacker techniques and improve security policies Explanation

Explanation

What role do real-time alerts play in a database honeypot system?

a: They slow down database performance Explanation

Explanation

b: They notify administrators immediately about suspicious activity Explanation

Explanation

c: They automatically shut down the entire system Explanation

Explanation

d: They hide attacker activity from logs Explanation

Explanation

Which principle allows a honeypot to collect intelligence about attacker behavior?

a: Data replication Explanation

Explanation

b: Network segmentation Explanation

Explanation

c: Controlled deception Explanation

Explanation

d: Data normalization Explanation

Explanation

How does a honeypot complement traditional security mechanisms?

a: By acting as an additional monitoring layer for suspicious activity Explanation

Explanation

b: By replacing authentication systems Explanation

Explanation

c: By disabling firewall protections Explanation

Explanation

d: By storing all real confidential data Explanation

Explanation

Honeypots for Database Attack Detection